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AmejOLdttieitts to the Claiitia 

1 Claim 1 (currently amended): A computer program product for efficiently generating pseudo- 

2 random bits, the computer program product embodied on one or more computer readable media 

3 aod compxismg: 

4 computer-readable program code means for providing an input value; 

5 computer-readable program code means for generating an output sequence of pseudo- 

6 random bits using the provided input value as an exponent of frtpuHo a 1 -way function 

7 comprising modular exponentiation modulo a safe prime numtCT, wherein a length in bits, C, of 

8 the input value is substantially shorter than a length in bits, of the generated output sequence 

9 and a base of the modular exponentiation is a fixed generator value : and 

1 0 computer-readable program code means for u^ng C selected bits of the generated output 

a 1 sequence as the provided input value for a next iteration of the computer-r^able program code 

1 2 means for generating while using all N - C remaining bits of the generated output sequence as 

1 3 pseudo-random output bits, utrti 1 a desired number of pseudo-random output bits have been 

14 generated. 

1 Claim 2 (original): The compute program product according to Claim 1 , wherein the 1-way 

2 function is based upon an assumption known as "the discrete logarithm with short exponent'* 

3 assumption. 

Claims 3-5 (canceled) 
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1 Claim 6 (currently amended): The computer program product according to Cl^m [[4]] i, 

2 vdierein the length of the input value is 1 60 bits and a length of the safe prime number is 1 024 

3 bits. 

1 Claim 7 (original): The computer program product according to Claim 1, wherein the length of 

2 the input value is at least 160 bits and the length of the generated output sequence is at least 1024 

3 bits. 

Claim 8 (canceled) 

1 Claim 9 (prervtously presented): The computer program product accordii^ to Claim 1, wherdn 

2 the N - C remaining bits are concatenated to pseudo-random output bits previously generated by 

3 the computer-readable program code means for generating. 

1 Claim 1 0 (previously presented): The computer program product according to Claim 1 , herein 

2 the N - C remaining bits are selected from the N bits of the generated output sequence as a 

3 contiguous group of bits. 

1 Claim 1 1 (previously presented): The computer program product according to Claim 1, wherein 

2 the N - C remaining bits are selected from the N bits of the generated output sequence as a non- 

3 contiguous group of bits. 
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1 Claim 12 (previously presented): The computer program product according to Claim 1, further 

2 comprising computer-readable program code means for using the desired number of generated 

3 pseudo-random bits as input to an encryption operation. 

1 Claim 13 (cuxrentty amended): A system for efficiently generating pseudo-random bits in a 

2 computing environmeirt, comprising: 

3 means for providing an input value; 

4 means for generating an output sequence of pseudo-random bits using the provided input 

5 value as an exponent of input to a 1-way function comprising modular_expOjaentiatiojtmo_djijjo_& 

6 safe prime mimber. wherein a length in bits, C» of the input value is substantially shorter than a 

7 length in bits, N, of the graierated output sequence and a base of the modular CTcponentiatjon ia a 

8 i^pl generatffi: value; and 

9 xn&ms for using C selected bits of the generated ou^ut sequence as the provided input 

10 value for a next iteration of the means for generating while using all N ^ C remaining bits of the 

1 1 generated output sequence as pseudo-random output bits» until a desired number of pseudo- 

12 random output bits have been generated. 

1 Claim 14 (original); Ute system according to Claim 13, wheiein the 1 -way function is based 

2 upon an assumption known as "Ihs discrete logarithm with short exponent" assumption. 

Claims 15-17 (canceled) 
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1 Claim 1 8 (ctineatly amended): The system according to Claim [fl 6]] 13, wherein the length of 

2 the input value is 160 bits and a length of the safe prime number is 1024 bits. 

1 Claim 1 9 (original): The system according to Claim 13, Avhetein the length of liie input value is 

2 at least 160 bits and the length of the generated output sequence is at least 1024 bits. 

Claim 20 (canceled) 

1 Claim 21 (previously presented): The system according to Claim 13, wherein the N - C 

2 remaining bits are concatenated to pseudo-random output bits previously generated by the means 

3 for generating. 

1 Claim 22 (previously presented): The system according to Claim 13, wherein the N - C 

2 remaining bits are selected from the N bits of the generated output sequence as a contiguous 

3 group of bits. 

1 Claitn 23 (previously presented): The system according to Claim 13, wherein the N - C 

2 remaining bits are selected from the N bits of the generated output sequence as a non-contiguous 

3 group of bits. 

1 Claim 24 (previously presented): The system accoiding to Claim 13, further comprising means 

2 for using the desired number of generated pseudo-random output bits as input to an encryption 
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3 operation. 

1 Claim 25 (currently amended): A method for efficiently generating pseudo-random bits, 

2 comprising the steps of: 

3 providing an input vaJtie; 

4 generating an output sequence of pseudo-random bits using the provided input value as an 

5 exponent of mroMo a 1 -way function comprisin|ELmodular exponentiation modulo a safe tarime 

6 mimber, wherein a length in bits, C, of the input value is substantially shorter than a length in 

7 bits, N, of the generated output sequence and a base of the modular_e?cp_OJDLen tiation is a fixed 

8 penerator value: and 

9 using C selected bits of the generated output sequence as the provided input value for a 

10 next iteration of the generating step vAiile xising all N - C remaining bits of the generated output 

1 1 sequence as pscudo-tandom output bits^ until a desired number of pseudo-random output bits 

1 2 have been generated, 

1 Claim 26 (original): TTie method according to Claim 25, \dierein the 1-way function is based 

2 upon an assumption known as "the discrete logarithm with short exponent" assumption. 

Claims 27 - 29 (canceled) 

1 Claim 30 (currently amended): The method according to Claim [[28]] 25, wherein the length of 

2 the input value is at least 160 bits and a length of the safe prime number is at least 1024 bits. 
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1 Claim 31 (original): The method according to Claim 25, wherein the length of the input value is 

2 1 60 bits and the length of the generated output sequence is 1024 bits. 

1 Claim 32 (original): The method according to Claim 25, wherein the length of the input value is 

2 at least 160 bits and the length of the generated output sequence i$ at least 1024 bits. 

Claim 33 (canceled) 

1 Claim 34 (previously presented): The method according to CMm 25, wherein the N - C 

2 remaining bits are concatenated to pseudo-random output bits previously generated by the 

3 generating step. 

1 Claim 35 (previously prcsraited): The method according to Claim 25, wherein the N - C 

2 t«maining bits are selected from the N bits of the generated ou^ut sequence as a contiguous 

3 grov^ of bits. 

1 Claim 36 (previously presented): The method according to Claim 25, wherein the N - C 

2 remaining bits are selected fix>m the N bits of the generated output sequence as a non-contiguous 

3 group of bits. 

1 Claim 37 (previously presented): The method according to Claim 25, ftirther comprising the step 
Serial No. 09/753,727/ RSW920000091US1 
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2 of using the desiied number of generated pseudo-random output bits as input to an encryption 

3 operation. 

Claim 38 (canceled) 

1 Claim 39 (currently amended): An encryption system, comprising: 

2 means for providing an input value; 

3 means for generating an output sequence of pseudo-random bits using the provided input 

4 value as an exponent of mpnHor a l>wav function compri sing modula r exponentiation modulo a 

5 safe prime number , wherein a length in bits, C, of the input value is substaintjally shorter than a 

6 length in bits, N, of the generated output sequence and a base of the modular exponentiation is_a 

7 fixed generator value: 

8 means for using C selected bits of the geiK^rated output sequence as the provided input 

9 value for a next iteration of the means for generating while using all N - C remaining bits of the 

10 generated output sequence as pseudo-random output bits, until a desired number of pseudo- 

1 1 random output bits have been generated; and 

) 2 m^ins for using the desned number* of generated pseudo-random bits as input to an 

1 3 encryption operation. 

1 Claim 40 (originaJ): The encryption system according to Claim 39, wherein the 1 -way function 

2 is based upon an assumption known as 'the discrete logarithm with short exponent'* assumption. 
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Claims 41 - 43 (canceled) 

1 Claim 44 (currently amended): The encryption system according to Claim [[42]] 22, whwin the 

2 length of the input value is 160 bits and a length of the safe prime number is 1 024 bits. 

1 Claim 45 (original): The encryption system according to Claim 39, vrfierein the length of the 

2 input value is 160 bits and the length of the generated output sequence is 1024 bits. 

Claim 46 (canceled) 

1 Claim 47 (currently amended): The encryption system according to Claim [[46]] 22^ wherem the 

2 N - C remaining bits are concatenated to pseudo-random output bits previously generated by the 

3 means for generating. 
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